$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570c62d2-d6de-46f4-bb70-e5512ff89837.roa File: 570c62d2-d6de-46f4-bb70-e5512ff89837.roa (raw, json) Hash identifier: kil+Cu6oDNn7rVCD4YCEj195iGSL4vpHtHDvc8o8sUo= Subject key identifier: 57:83:EE:A0:D7:EC:52:D9:79:5B:1E:5F:2D:41:F6:20:18:CF:1E:5E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 26C2EC66FBDEB24A9E620643A20598B3559E4FD3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570c62d2-d6de-46f4-bb70-e5512ff89837.roa Signing time: Wed 10 Apr 2024 00:00:00 +0000 ROA not before: Wed 10 Apr 2024 00:00:00 +0000 ROA not after: Wed 15 May 2024 23:59:59 +0000 asID: 14618 IP address blocks: 168.192.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c2:ec:66:fb:de:b2:4a:9e:62:06:43:a2:05:98:b3:55:9e:4f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 10 00:00:00 2024 GMT Not After : May 15 23:59:59 2024 GMT Subject: serialNumber=f3e5e66892ee87bbc449698e016cdaa4aea715d91c9e7e7502a5f8cc490f92aa, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:98:68:b2:e3:44:5c:76:44:d5:7a:b4:a7: d0:dc:43:1b:cd:b2:9b:68:d3:c2:30:da:d3:85:d5: 0e:33:b2:39:3c:b5:c0:aa:f4:56:a4:22:ae:58:9d: 60:5e:0f:28:75:48:ff:09:4a:2e:23:32:90:29:cc: 57:84:b3:94:ad:e9:85:ea:b7:89:ac:c5:d0:bc:75: 94:9c:9c:2c:21:65:78:82:bf:9a:aa:71:03:86:b3: 7a:2b:89:79:5c:c2:78:dc:a4:de:88:70:e7:e1:f9: fd:f5:1e:76:0b:d6:00:cb:1a:1e:78:d5:85:3c:3d: d2:35:c2:5d:ce:a4:0d:e7:b7:fc:34:52:1a:a7:1a: f8:7d:07:9d:32:a2:2b:39:96:9e:01:84:a3:de:aa: d1:21:49:45:e7:b1:91:a1:35:ee:0a:0d:5f:05:52: 3c:75:f1:c3:7e:fa:ef:2f:bc:66:0e:75:86:bd:b7: e3:3a:cf:df:dd:2b:b7:a5:37:03:29:31:e7:c3:3f: bf:ac:f8:26:20:1a:83:7a:56:14:2a:64:ed:4c:9a: 9c:4d:47:50:bc:3d:af:d2:1f:b8:b2:5f:be:09:f5: 5e:0d:30:93:27:01:a8:a3:a3:36:10:a9:a6:15:3a: 74:ee:cb:82:b6:f8:09:31:f1:29:c0:66:35:30:0c: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:83:EE:A0:D7:EC:52:D9:79:5B:1E:5F:2D:41:F6:20:18:CF:1E:5E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/570c62d2-d6de-46f4-bb70-e5512ff89837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.192.0.0/15 Signature Algorithm: sha256WithRSAEncryption 09:f3:e9:59:66:32:74:13:1a:5c:88:f4:f4:d3:3d:9a:09:13: bf:97:95:88:98:f8:db:46:06:78:3c:ac:56:d5:33:91:a3:80: dc:ad:d7:c9:b6:e9:11:42:fd:fc:35:ac:f6:5b:a2:90:9c:00: 6e:ea:8d:b4:06:46:91:26:40:53:15:28:c5:2f:a2:1a:9f:ae: bb:b3:1d:55:7b:87:c1:38:17:ee:4d:dd:b5:44:81:c7:b7:80: ae:ed:23:0f:37:fa:ee:94:cc:d4:03:f2:12:8f:d2:ed:a8:d0: 73:be:78:45:21:23:08:ad:ea:be:c2:62:77:52:74:24:6a:8c: 60:9d:7c:69:e8:97:69:20:9f:1e:41:ab:c3:ac:b1:7f:b8:69: 22:15:31:01:dd:56:77:7a:f9:17:d8:74:f0:a4:31:6a:80:b3: 66:f0:e9:b4:32:27:4c:cd:a7:69:8e:b8:de:50:0c:3b:bc:e6: 2e:94:02:d3:6f:0f:f2:a0:49:7a:07:98:75:ec:43:74:c5:f8: 12:27:a9:cd:3d:4f:1d:7c:8f:bf:fd:10:12:fd:d5:f4:2d:d4: a1:f8:4c:57:50:bb:a1:0e:a4:f7:8a:62:de:3a:5b:e7:ba:97: 21:0e:db:cb:3e:5b:7e:69:16:74:c4:11:e0:ae:4d:f8:a6:af: 73:6c:22:f3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJsLsZvveskqeYgZDogWYs1WeT9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjQwNDEwMDAwMDAwWhcNMjQwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmM2U1ZTY2ODkyZWU4N2JiYzQ0OTY5OGUwMTZjZGFhNGFl YTcxNWQ5MWM5ZTdlNzUwMmE1ZjhjYzQ5MGY5MmFhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCamZhosuNEXHZE1Xq0p9DcQxvNspto08Iw2tOF1Q4zsjk8 tcCq9FakIq5YnWBeDyh1SP8JSi4jMpApzFeEs5St6YXqt4msxdC8dZScnCwhZXiC v5qqcQOGs3oriXlcwnjcpN6IcOfh+f31HnYL1gDLGh541YU8PdI1wl3OpA3nt/w0 UhqnGvh9B50yois5lp4BhKPeqtEhSUXnsZGhNe4KDV8FUjx18cN++u8vvGYOdYa9 t+M6z9/dK7elNwMpMefDP7+s+CYgGoN6VhQqZO1MmpxNR1C8Pa/SH7iyX74J9V4N MJMnAaijozYQqaYVOnTuy4K2+Akx8SnAZjUwDDDbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUV4PuoNfsUtl5Wx5fLUH2IBjPHl4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzU3MGM2MmQyLWQ2ZGUtNDZmNC1iYjcwLWU1NTEyZmY4OTgzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGowDANBgkqhkiG9w0BAQsFAAOCAQEACfPpWWYydBMaXIj09NM9mgkTv5eV iJj420YGeDysVtUzkaOA3K3XybbpEUL9/DWs9luikJwAbuqNtAZGkSZAUxUoxS+i Gp+uu7MdVXuHwTgX7k3dtUSBx7eAru0jDzf67pTM1APyEo/S7ajQc754RSEjCK3q vsJid1J0JGqMYJ18aeiXaSCfHkGrw6yxf7hpIhUxAd1Wd3r5F9h08KQxaoCzZvDp tDInTM2naY643lAMO7zmLpQC028P8qBJegeYdexDdMX4EiepzT1PHXyPv/0QEv3V 9C3UofhMV1C7oQ6k94pi3jpb57qXIQ7byz5bfmkWdMQR4K5N+Kavc2wi8w== -----END CERTIFICATE-----Generated at Wed May 1 22:06:34 2024 by rpki-client on console-fra.rpki-client.org